Hello, We noticed that FD-DS roaming is no longer working. We use hostapd with our own patches rebased on top of it, so it is not easy to bisect, but it appears the problem was introduced sometime between commit: eap_proxy: Support multiple SIMs in get_imsi() (our rebase on top of this worked) and tests: WPS with other AES-based ciphers (our rebase on top of this fails). We see the same behaviour with both ath9k and ath10k (wave-1 CT fw) radios. We kept the kernel, driver, firmware, and user-space control logic identical when comparing good vs bad. We can update the supplicant to any of our recent releases and it works fine as long as we keep hostapd at the older release, so it does not appear to be a supplicant issue. Here are some notes from our internal bug report: wpa_cli: wpa_cli -i wlan0 scan wpa_cli -i wlan0 ft_ds 00:0e:8e:9d:ff:71 wpa_cli -i wlan0 scan wpa_cli -i wlan0 ft_ds 00:0e:8e:2c:75:48 When using the newer hostapd, the client roams worked in one direction but not in the other direction: Attempted a wpa_cli ft_ds and was successful from vap2 to vap1, but the client station disconnects when attempting wpa_cli ft_ds from vap1 to vap2. In the error condition, the hostapd log file ends with: 1548200760.282635: 1548200760.282636: vap2: STA 00:0e:8e:5b:a9:15 IEEE 802.11: authentication OK (FT) 1548200760.282643: 1548200760.282644: vap2: STA 00:0e:8e:5b:a9:15 MLME: MLME-AUTHENTICATE.indication(00:0e:8e:5b:a9:15, FT) 1548200760.284892: FT: 00:0e:8e:5b:a9:15 tried to use association (not re-association) with FT auth_alg The auth_alg (Fast BSS Transition Authentication) also appears over the air several times when the client is disconnected...using the following tshark: tshark -n -i moni5a -Y 'wlan_mgt.fixed.auth.alg==2 or wlan.fc.type_subtype==0x0002 or wlan.fc.type_subtype==0x0003' 1447 37.614559299 00:0e:8e:5b:a9:15 -> 00:0e:8e:2c:75:48 802.11 288 Frame is not being retransmitted Reassociation Request, SN=2403, FN=0, Flags=........, SSID=11r-9k 1449 37.615801399 00:0e:8e:2c:75:48 -> 00:0e:8e:5b:a9:15 802.11 181 Frame is not being retransmitted Reassociation Response, SN=864, FN=0, Flags=........ 1514 39.782577276 00:0e:8e:5b:a9:15 -> 00:0e:8e:2c:75:48 802.11 221 Frame is not being retransmitted Fast BSS Transition Authentication, SN=2405, FN=0, Flags=........ 1517 39.784638524 00:0e:8e:2c:75:48 -> 00:0e:8e:5b:a9:15 802.11 233 Frame is not being retransmitted Fast BSS Transition Authentication, SN=875, FN=0, Flags=........ 1709 44.951556728 00:0e:8e:5b:a9:15 -> 00:0e:8e:9d:ff:71 802.11 221 Frame is not being retransmitted Fast BSS Transition Authentication, SN=2408, FN=0, Flags=........ 1712 44.953581902 00:0e:8e:9d:ff:71 -> 00:0e:8e:5b:a9:15 802.11 233 Frame is not being retransmitted Fast BSS Transition Authentication, SN=810, FN=0, Flags=........ Any suggestions for what might be the issue is welcome. We can do some work to bisect this on stock hostapd if required. Thanks, Ben -- Ben Greear <greearb@xxxxxxxxxxxxxxx> Candela Technologies Inc http://www.candelatech.com _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
